CVE-2021-27030 is a Directory Traversal Remote Code Execution vulnerability in Autodesk FBX Review, allowing arbitrary code execution if a user opens a malicious FBX file. This vulnerability carries a CVSS score of 7.8 (HIGH), indicating high impacts on confidentiality, integrity, and availability, with low attack complexity but requiring user interaction. Although not in CISA's KEV, it is on an active hot list and has a high EPSS score, suggesting a significant probability of exploitation. While public exploit code is currently unavailable, the vulnerability has garnered community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 1.5.0CPE matchmatch criteria | cpe:2.3:a:autodesk:fbx_review:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.